[PATCH 6.1 00/78] 6.1.153-rc1 review

[Greg Kroah-Hartman]

This is the start of the stable review cycle for the 6.1.153 release.
There are 78 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Fri, 19 Sep 2025 12:32:53 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.153-rc1.gz
or in the git tree and branch at:
	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
    Linux 6.1.153-rc1

Bjorn Andersson <bjorn.andersson@xxxxxxxxxxxxxxxx>
    soc: qcom: mdt_loader: Deal with zero e_shentsize

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
    soc: qcom: mdt_loader: Fix error return values in mdt_header_valid()

Jani Nikula <jani.nikula@xxxxxxxxx>
    drm/i915/power: fix size for for_each_set_bit() in abox iteration

Alex Deucher <alexander.deucher@xxxxxxx>
    drm/amdgpu: fix a memory leak in fence cleanup when unloading

Johan Hovold <johan@xxxxxxxxxx>
    phy: ti-pipe3: fix device leak at unbind

Johan Hovold <johan@xxxxxxxxxx>
    phy: tegra: xusb: fix device and OF node leak at probe

Miaoqian Lin <linmq006@xxxxxxxxx>
    dmaengine: dw: dmamux: Fix device reference leak in rzn1_dmamux_route_allocate

Stephan Gerhold <stephan.gerhold@xxxxxxxxxx>
    dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees

Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
    USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels

Xiongfeng Wang <wangxiongfeng2@xxxxxxxxxx>
    hrtimers: Unconditionally update target CPU base after offline timer migration

Jiapeng Chong <jiapeng.chong@xxxxxxxxxxxxxxxxx>
    hrtimer: Rename __hrtimer_hres_active() to hrtimer_hres_active()

Jiapeng Chong <jiapeng.chong@xxxxxxxxxxxxxxxxx>
    hrtimer: Remove unused function

Andreas Kemnade <akemnade@xxxxxxxxxx>
    regulator: sy7636a: fix lifecycle of power good gpio

Anders Roxell <anders.roxell@xxxxxxxxxx>
    dmaengine: ti: edma: Fix memory allocation size for queue_priority_map

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
    dmaengine: idxd: Fix double free in idxd_setup_wqs()

Hangbin Liu <liuhangbin@xxxxxxxxx>
    hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr

Hangbin Liu <liuhangbin@xxxxxxxxx>
    hsr: use rtnl lock when iterating over ports

Murali Karicheri <m-karicheri2@xxxxxx>
    net: hsr: Add VLAN CTAG filter support

Murali Karicheri <m-karicheri2@xxxxxx>
    net: hsr: Add support for MC filtering at the slave device

Ravi Gunasekaran <r-gunasekaran@xxxxxx>
    net: hsr: Disable promiscuous mode in offload mode

Anssi Hannula <anssi.hannula@xxxxxxxxxx>
    can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB

Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx>
    can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails

Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx>
    can: j1939: j1939_sk_bind(): call j1939_priv_put() immediately when j1939_local_ecu_get() failed

Michal Schmidt <mschmidt@xxxxxxxxxx>
    i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path

Kohei Enju <enjuk@xxxxxxxxxx>
    igb: fix link test skipping when interface is admin down

Alex Tran <alex.t.tran@xxxxxxxxx>
    docs: networking: can: change bcm_msg_head frames member to support flexible array

Antoine Tenart <atenart@xxxxxxxxxx>
    tunnels: reset the GSO metadata before reusing the skb

Stefan Wahren <wahrenst@xxxxxxx>
    net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable()

Fabio Porcedda <fabio.porcedda@xxxxxxxxx>
    USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions

Fabio Porcedda <fabio.porcedda@xxxxxxxxx>
    USB: serial: option: add Telit Cinterion FN990A w/audio compositions

Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxx>
    dt-bindings: serial: brcm,bcm7271-uart: Constrain clocks

Hugo Villeneuve <hvilleneuve@xxxxxxxxxxxx>
    serial: sc16is7xx: fix bug in flow control levels init

Fabian Vogt <fvogt@xxxxxxx>
    tty: hvc_console: Call hvc_kick in hvc_write unconditionally

Paolo Abeni <pabeni@xxxxxxxxxx>
    Revert "net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups"

Christoffer Sandberg <cs@xxxxxxxxx>
    Input: i8042 - add TUXEDO InfinityBook Pro Gen10 AMD to i8042 quirk table

Jeff LaBundy <jeff@xxxxxxxxxxx>
    Input: iqs7222 - avoid enabling unused interrupts

Miaohe Lin <linmiaohe@xxxxxxxxxx>
    mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory

Chen Ridong <chenridong@xxxxxxxxxx>
    kernfs: Fix UAF in polling when open file is released

Wei Yang <richard.weiyang@xxxxxxxxx>
    mm/khugepaged: fix the address passed to notifier on testing young

Vishal Moola (Oracle) <vishal.moola@xxxxxxxxx>
    mm/khugepaged: convert hpage_collapse_scan_pmd() to use folios

Alexander Sverdlin <alexander.sverdlin@xxxxxxxxxxx>
    mtd: nand: raw: atmel: Respect tAR, tCLR in read setup timing

Alexander Dahl <ada@xxxxxxxxxxx>
    mtd: nand: raw: atmel: Fix comment in timings preparation

Quanmin Yan <yanquanmin1@xxxxxxxxxx>
    mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters()

Quanmin Yan <yanquanmin1@xxxxxxxxxx>
    mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters()

Stanislav Fort <stanislav.fort@xxxxxxxxx>
    mm/damon/sysfs: fix use-after-free in state_show()

Ilya Dryomov <idryomov@xxxxxxxxx>
    libceph: fix invalid accesses to ceph_connection_v1_info

Miklos Szeredi <mszeredi@xxxxxxxxxx>
    fuse: prevent overflow in copy_file_range return value

Miklos Szeredi <mszeredi@xxxxxxxxxx>
    fuse: check if copy_file_range() returns larger than requested size

Christophe Kerello <christophe.kerello@xxxxxxxxxxx>
    mtd: rawnand: stm32_fmc2: fix ECC overwrite

Christophe Kerello <christophe.kerello@xxxxxxxxxxx>
    mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer

Oleksij Rempel <linux@xxxxxxxxxxxxxxxx>
    net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups

Mark Tinguely <mark.tinguely@xxxxxxxxxx>
    ocfs2: fix recursive semaphore deadlock in fiemap call

Krister Johansen <kjlx@xxxxxxxxxxxxxxxxxx>
    mptcp: sockopt: make sync_socket_options propagate SOCK_KEEPOPEN

Nathan Chancellor <nathan@xxxxxxxxxx>
    compiler-clang.h: define __SANITIZE_*__ macros only when undefined

Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
    Revert "SUNRPC: Don't allow waiting for exiting tasks"

Salah Triki <salah.triki@xxxxxxxxx>
    EDAC/altera: Delete an inappropriate dma_free_coherent() call

Borislav Petkov (AMD) <bp@xxxxxxxxx>
    KVM: SVM: Set synthesized TSA CPUID flags

Boris Ostrovsky <boris.ostrovsky@xxxxxxxxxx>
    KVM: SVM: Return TSA_SQ_NO and TSA_L1_NO bits in __do_cpuid_func()

Kim Phillips <kim.phillips@xxxxxxx>
    KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code

wangzijie <wangzijie1@xxxxxxxxx>
    proc: fix type confusion in pde_set_flags()

Kuniyuki Iwashima <kuniyu@xxxxxxxxxx>
    tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.

Thomas Richter <tmricht@xxxxxxxxxxxxx>
    s390/cpum_cf: Deny all sampling events by counter PMU

Pu Lehui <pulehui@xxxxxxxxxx>
    tracing: Silence warning when chunk allocation fails in trace_pid_write

Jonathan Curley <jcurley@xxxxxxxxxxxxxxx>
    NFSv4/flexfiles: Fix layout merge mirror check.

Vladimir Riabchun <ferr.lambarginio@xxxxxxxxx>
    ftrace/samples: Fix function size computation

Luo Gengkun <luogengkun@xxxxxxxxxxxxxxx>
    tracing: Fix tracing_marker may trigger page fault during preempt_disable

Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
    NFSv4: Clear the NFS_CAP_XATTR flag if not supported by the server

Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
    NFSv4: Clear the NFS_CAP_FS_LOCATIONS flag if it is not set

Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
    NFSv4: Don't clear capabilities that won't be reset

Tigran Mkrtchyan <tigran.mkrtchyan@xxxxxxx>
    flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read

Steven Rostedt <rostedt@xxxxxxxxxxx>
    tracing: Do not add length to print format in synthetic events

Srinivas Kandagatla <srinivas.kandagatla@xxxxxxxxxx>
    ASoC: q6apm-dai: schedule all available frames to avoid dsp under-runs

Kuniyuki Iwashima <kuniyu@xxxxxxxxxx>
    net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.

André Apitzsch <git@xxxxxxxxxxx>
    media: i2c: imx214: Fix link frequency validation

Arnd Bergmann <arnd@xxxxxxxx>
    media: mtk-vcodec: venc: avoid -Wenum-compare-conditional warning

Jiasheng Jiang <jiashengjiangcool@xxxxxxxxx>
    media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization

Harry Yoo <harry.yoo@xxxxxxxxxx>
    mm: introduce and use {pgd,p4d}_populate_kernel()

Yeoreum Yun <yeoreum.yun@xxxxxxx>
    kunit: kasan_test: disable fortify string checker on kasan_strings() test


-------------

Diffstat:

 .../bindings/serial/brcm,bcm7271-uart.yaml         |   2 +-
 Documentation/networking/can.rst                   |   2 +-
 Makefile                                           |   4 +-
 arch/s390/kernel/perf_cpum_cf.c                    |   4 +-
 arch/x86/kvm/cpuid.c                               |  33 +++--
 drivers/dma/dw/rzn1-dmamux.c                       |  15 +-
 drivers/dma/idxd/init.c                            |  33 +++--
 drivers/dma/qcom/bam_dma.c                         |   8 +-
 drivers/dma/ti/edma.c                              |   4 +-
 drivers/edac/altera_edac.c                         |   1 -
 drivers/gpu/drm/amd/amdgpu/amdgpu_ring.c           |   3 -
 drivers/gpu/drm/i915/display/intel_display_power.c |   6 +-
 drivers/input/misc/iqs7222.c                       |   3 +
 drivers/input/serio/i8042-acpipnpio.h              |  14 ++
 drivers/media/i2c/imx214.c                         |  27 +++-
 .../platform/mediatek/vcodec/mtk_vcodec_fw_scp.c   |   4 +-
 .../platform/mediatek/vcodec/venc/venc_h264_if.c   |   6 +-
 drivers/mtd/nand/raw/atmel/nand-controller.c       |  18 ++-
 drivers/mtd/nand/raw/stm32_fmc2_nand.c             |  46 +++---
 drivers/net/can/xilinx_can.c                       |  16 +-
 drivers/net/ethernet/freescale/fec_main.c          |   3 +-
 drivers/net/ethernet/intel/i40e/i40e_main.c        |   2 +-
 drivers/net/ethernet/intel/igb/igb_ethtool.c       |   5 +-
 drivers/phy/tegra/xusb-tegra210.c                  |   6 +-
 drivers/phy/ti/phy-ti-pipe3.c                      |  13 ++
 drivers/regulator/sy7636a-regulator.c              |   7 +-
 drivers/soc/qcom/mdt_loader.c                      |  14 +-
 drivers/tty/hvc/hvc_console.c                      |   6 +-
 drivers/tty/serial/sc16is7xx.c                     |  14 +-
 drivers/usb/gadget/udc/dummy_hcd.c                 |   8 +-
 drivers/usb/serial/option.c                        |  17 +++
 fs/fuse/file.c                                     |   5 +-
 fs/kernfs/file.c                                   |  54 ++++---
 fs/nfs/client.c                                    |   2 +
 fs/nfs/flexfilelayout/flexfilelayout.c             |  21 ++-
 fs/nfs/nfs4proc.c                                  |   6 +-
 fs/ocfs2/extent_map.c                              |  10 +-
 fs/proc/generic.c                                  |   3 +-
 include/linux/compiler-clang.h                     |  31 +++-
 include/linux/pgalloc.h                            |  29 ++++
 include/linux/pgtable.h                            |  13 +-
 include/net/sock.h                                 |  40 ++++-
 kernel/time/hrtimer.c                              |  50 ++-----
 kernel/trace/trace.c                               |  10 +-
 kernel/trace/trace_events_synth.c                  |   2 -
 mm/damon/lru_sort.c                                |   3 +
 mm/damon/reclaim.c                                 |   3 +
 mm/damon/sysfs.c                                   |  14 +-
 mm/kasan/init.c                                    |  12 +-
 mm/kasan/kasan_test.c                              |   1 +
 mm/khugepaged.c                                    |  22 +--
 mm/memory-failure.c                                |   7 +-
 mm/percpu.c                                        |   6 +-
 mm/sparse-vmemmap.c                                |   6 +-
 net/can/j1939/bus.c                                |   5 +-
 net/can/j1939/socket.c                             |   3 +
 net/ceph/messenger.c                               |   7 +-
 net/core/sock.c                                    |   5 +
 net/hsr/hsr_device.c                               | 163 ++++++++++++++++++++-
 net/hsr/hsr_main.c                                 |   4 +-
 net/hsr/hsr_main.h                                 |   4 +
 net/hsr/hsr_slave.c                                |  15 +-
 net/ipv4/ip_tunnel_core.c                          |   6 +
 net/ipv4/tcp_bpf.c                                 |   5 +-
 net/mptcp/sockopt.c                                |  11 +-
 net/sunrpc/sched.c                                 |   2 -
 samples/ftrace/ftrace-direct-modify.c              |   2 +-
 sound/soc/qcom/qdsp6/q6apm-dai.c                   |  28 +++-
 68 files changed, 669 insertions(+), 285 deletions(-)